Bug#911248: globus-gass-copy-progs: copy fails with some SSL errors

2018-11-03 Thread Mattias Ellert 
lör 2018-11-03 klockan 02:10 +0100 skrev Christoph Anton Mitterer:
> Hey Mattias.
> 
> Thanks :-)
> 
> Since you're also the voms-client maintainer, couldn't you perhaps
> modify that already so that it defaults to 2048 (or yet better 4096)?
> 
> Cheers,
> Chris.

This was already done. If you look at this bug in BTS you see that it
now reads:

Found in versions voms-clients/2.1.0~rc0-4, voms-clients-java/3.3.0-1
Fixed in versions voms-clients-java/3.3.0-2, voms-clients/2.1.0~rc0-5

For reference here are the corresponding upstream PRs:

https://github.com/italiangrid/voms/pull/75
https://github.com/italiangrid/voms-clients/pull/20

Mattias



smime.p7s
Description: S/MIME cryptographic signature

Bug#911248: globus-gass-copy-progs: copy fails with some SSL errors

2018-11-02 Thread Christoph Anton Mitterer 
Hey Mattias.

Thanks :-)

Since you're also the voms-client maintainer, couldn't you perhaps
modify that already so that it defaults to 2048 (or yet better 4096)?

Cheers,
Chris.

Bug#911248: globus-gass-copy-progs: copy fails with some SSL errors

2018-10-17 Thread Christoph Anton Mitterer 
Package: globus-gass-copy-progs
Version: 10.3-1
Severity: important


Hi.

The following might be some issue with current libssl versions?
$ globus-url-copy -dbg -vb 
gsiftp://lcg-lrz-dc09.grid.lrz.de/pnfs/lrz-muenchen.de/data/atlas/dq2/atlasdatadisk/rucio/data15_13TeV/8f/66/DRAW_RPVLL.10929329._031512.pool.root.1
 foo 
Source: 
gsiftp://lcg-lrz-dc09.grid.lrz.de/pnfs/lrz-muenchen.de/data/atlas/dq2/atlasdatadisk/rucio/data15_13TeV/8f/66/
Dest:   file:///home/calestyo/
  DRAW_RPVLL.10929329._031512.pool.root.1  ->  foo
debug: starting to get 
gsiftp://lcg-lrz-dc09.grid.lrz.de/pnfs/lrz-muenchen.de/data/atlas/dq2/atlasdatadisk/rucio/data15_13TeV/8f/66/DRAW_RPVLL.10929329._031512.pool.root.1
debug: connecting to 
gsiftp://lcg-lrz-dc09.grid.lrz.de/pnfs/lrz-muenchen.de/data/atlas/dq2/atlasdatadisk/rucio/data15_13TeV/8f/66/DRAW_RPVLL.10929329._031512.pool.root.1

debug: response from 
gsiftp://lcg-lrz-dc09.grid.lrz.de/pnfs/lrz-muenchen.de/data/atlas/dq2/atlasdatadisk/rucio/data15_13TeV/8f/66/DRAW_RPVLL.10929329._031512.pool.root.1:
220 GSI FTP door ready

debug: authenticating with 
gsiftp://lcg-lrz-dc09.grid.lrz.de/pnfs/lrz-muenchen.de/data/atlas/dq2/atlasdatadisk/rucio/data15_13TeV/8f/66/DRAW_RPVLL.10929329._031512.pool.root.1
debug: fault on connection to 
gsiftp://lcg-lrz-dc09.grid.lrz.de/pnfs/lrz-muenchen.de/data/atlas/dq2/atlasdatadisk/rucio/data15_13TeV/8f/66/DRAW_RPVLL.10929329._031512.pool.root.1:
 globus_ftp_control: gss_init_sec_context failed
debug: data callback, error globus_ftp_control: gss_init_sec_context failed, 
buffer 0x7f01aea93010, length 0, offset=0, eof=true
debug: operation complete

error: globus_ftp_control: gss_init_sec_context failed
GSS failure: 
GSS Major Status: General failure
GSS Minor Status Error Chain:
globus_gsi_gssapi: Error with gss context
globus_gsi_gssapi: Error with gss credential handle
globus_gsi_gssapi: Error with openssl: Couldn't set the certificate to be used 
for the SSL context
OpenSSL Error: ../ssl/ssl_rsa.c:310: in library: SSL routines, function 
SSL_CTX_use_certificate: ee key too small


Both, client and server certs are current ones as issued within the grid.

Any ideas?

Thanks,
Chris.



-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages globus-gass-copy-progs depends on:
ii  libc6 2.27-6
ii  libglobus-common0 18.0-1
ii  libglobus-ftp-client2 9.1-1
ii  libglobus-gass-copy2  10.3-1
ii  libglobus-gass-transfer2  9.0-1
ii  libglobus-gsi-sysconfig1  9.1-1
ii  libglobus-gssapi-error2   6.0-1
ii  libglobus-gssapi-gsi4 14.7-1
ii  libglobus-io3 12.1-1
ii  libltdl7  2.4.6-6
ii  libssl1.1 1.1.1-1

globus-gass-copy-progs recommends no packages.

globus-gass-copy-progs suggests no packages.

-- no debconf information